d2a58e169232b5666760ceb6431a7bb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2a58e169232b5666760ceb6431a7bb0_JaffaCakes118
Size

226KB
MD5

d2a58e169232b5666760ceb6431a7bb0
SHA1

bd8188f41bc65a88b42ef40fa33e39ff13306e45
SHA256

1f01e3fd456762217dae480cafdd9b096b43c43ea369ec8a2f47290f4c80466b
SHA512

dca3dbf9587676e3016c6b9aa815201ff88f1b9bb0d48b73047d830e1feb7aa8ceb439b195876a21ec4242b1d65e9db9405efcf47256b1675f0098da0a6ce486
SSDEEP

6144:LStm/jKqBQJm8hExu76EyApvYNIEor4oiozLuJlUL3:LHRfAkujKNIEovHqvU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2a58e169232b5666760ceb6431a7bb0_JaffaCakes118

Files

d2a58e169232b5666760ceb6431a7bb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e2373145407093a1936d498f95f1b39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ExitProcess
ReleaseSemaphore
LoadLibraryA
VirtualAlloc
GetProcAddress

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ